4831795f711072771ad02fd808949acc2224b86e7ee6fd9950e4d9559aa6b8aa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4831795f711072771ad02fd808949acc2224b86e7ee6fd9950e4d9559aa6b8aa
Size

109KB
MD5

90d0f730505c4372a387b389ef77cf3d
SHA1

e5d884636622130f9bfc1c0aea367697196ceed9
SHA256

4831795f711072771ad02fd808949acc2224b86e7ee6fd9950e4d9559aa6b8aa
SHA512

32d655aaaeb0146f3b359ff742ad83fb1573ec8b17ff649eb43cb6052c8362eec230e1cbdfb1405e7670649e3e2914f6d3f5d1c519c22645b4ece325b19e2ff6
SSDEEP

768:T1NLew0Z282LVPEDq+y/ynLYJDWOfoQP9FAZ0QmsKofH+aicPEQ8c8LLLLLLLLLE:xdew0ZM58iiLYJDTB9SusKMHpi1e/etS

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

4831795f711072771ad02fd808949acc2224b86e7ee6fd9950e4d9559aa6b8aa
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 166.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 106KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 166.9MB - Virtual size: 166.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ